Mailchimp

5 CVEs in 4 Mailchimp products, including Mailchimp For Woocommerce, Easy Mailchimp Forms Plugin, Mailchimp For Woocommerce.

Mailchimp products with known CVEs

ProductCVEs
Mailchimp For Woocommerce2
Easy Mailchimp Forms Plugin1
Mailchimp For Woocommerce1
Mailchimp List Subscribe Form1
Mailchimp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73346High7.62026-08-13Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
CVE-2025-12172Medium4.32026-02-19The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to…
CVE-2022-2556Low2.72022-08-29The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the serv…
CVE-2022-2267Medium4.32022-08-29The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request o…
CVE-2014-71522014-09-26Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web scr…